Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.mft
File: BADXfvnqDtKVK-L2D6067MLhaKw.mft (raw, json)
Hash identifier: NfO9m7/iq0Lh5YOTrfRtuCFAZqXNlDvUTMOTtIcQUX0=
Subject key identifier: BE:54:C9:19:E0:04:FA:D2:52:10:FD:6C:94:9A:99:9C:EF:5B:28:18
Authority key identifier: 04:00:D7:7E:F9:EA:0E:D2:95:2B:E2:F6:0F:AD:3A:EC:C2:E1:68:AC
Certificate issuer: /CN=0400d77ef9ea0ed2952be2f60fad3aecc2e168ac
Certificate serial: 0196C04AC85910F7958E225DE03297B105B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.mft
Manifest number: 0856
Signing time: Sun 11 May 2025 17:00:48 +0000
Manifest this update: Sun 11 May 2025 17:00:48 +0000
Manifest next update: Mon 12 May 2025 17:00:48 +0000
Files and hashes: 1: BADXfvnqDtKVK-L2D6067MLhaKw.crl (hash: MJgKaKSmkaUqF/MUsXWGxo/GZ6DOXckqccFd6o6nBZg=)
2: jgMTcyosgm7FIVLeAPtI1RSjhVU.roa (hash: g2bFBV/1uz4ha4E7siEdgYNeYk8szBDsVWWKSTGKJE4=)
3: pO3Lr4jiN61Kn49lUDVd_S0OVvM.roa (hash: mIykw56twR66Kx0cZsZgXBwa4bIpNsTJWsybM0eym2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:4a:c8:59:10:f7:95:8e:22:5d:e0:32:97:b1:05:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0400d77ef9ea0ed2952be2f60fad3aecc2e168ac
Validity
Not Before: May 11 17:00:48 2025 GMT
Not After : May 12 17:00:48 2025 GMT
Subject: CN=be54c919e004fad25210fd6c949a999cef5b2818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:7c:f5:c9:bf:42:a9:48:f7:73:7b:c5:2f:28:
9b:a8:31:88:bb:8f:d5:a8:bf:ff:bb:64:5b:6f:be:
a7:2d:74:ad:a3:48:34:1e:2d:e2:60:aa:0a:2d:9f:
86:05:77:4d:c0:d1:e1:83:97:4f:62:57:57:ff:4c:
79:e3:74:0e:e4:fa:53:be:65:2a:80:cc:8a:24:3e:
a6:12:28:6f:41:29:de:08:d2:a2:69:32:d9:f5:eb:
76:cd:b3:e1:58:31:85:9d:de:0f:9d:45:55:15:05:
bb:19:b4:20:0e:2b:72:18:76:fe:63:87:aa:12:91:
b1:40:80:19:d1:23:fe:22:55:a3:6d:e1:04:7d:93:
c0:40:08:a7:1c:4e:b8:c5:fc:9c:cd:d3:10:6e:ac:
1a:a1:9a:aa:e0:7a:d9:0d:1f:28:6b:a7:ef:cc:96:
f3:21:fb:34:86:81:1f:68:a5:05:42:cb:c8:d3:c9:
38:54:73:fa:10:d0:a1:57:de:4d:37:f6:b3:0c:0a:
1f:df:96:86:7a:87:e6:b0:58:b9:7f:79:3f:b0:cd:
25:7b:86:93:0a:62:d8:99:1d:83:10:35:0c:2c:b3:
4a:e4:ff:e5:8d:83:85:13:62:96:82:98:00:e3:61:
5a:fe:4a:c9:71:e8:16:c4:13:9e:4f:78:05:5f:df:
db:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:54:C9:19:E0:04:FA:D2:52:10:FD:6C:94:9A:99:9C:EF:5B:28:18
X509v3 Authority Key Identifier:
keyid:04:00:D7:7E:F9:EA:0E:D2:95:2B:E2:F6:0F:AD:3A:EC:C2:E1:68:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:a3:61:76:c9:f0:0c:1e:75:c4:e9:c2:5c:0f:3f:b8:20:85:
d7:e3:8c:0c:57:bc:1b:ab:8d:b5:78:4b:64:35:bb:1f:a6:20:
f1:bc:0d:87:54:db:6b:29:00:79:3a:53:f5:25:12:8a:49:a1:
bb:e9:e0:b5:5d:97:22:4e:7f:98:fc:49:f1:98:1f:1f:3c:be:
be:96:77:99:3a:36:84:d7:e6:cc:a9:86:27:c5:1a:aa:df:d7:
c2:e1:fc:51:70:3e:72:02:c4:44:2d:66:2e:de:0e:0c:f3:ad:
55:5d:5c:d4:96:75:c8:66:c5:56:7e:86:74:e2:3b:04:cf:64:
37:df:3c:2e:0b:ce:67:f7:9d:fe:51:be:e7:45:bf:c0:b6:4d:
8d:87:c3:57:e0:27:1e:16:9c:b2:00:95:48:82:05:33:23:08:
62:98:63:0b:2c:93:51:65:ff:c0:97:c7:88:b7:06:15:e3:5e:
04:d5:74:9a:d5:fa:62:5c:fc:85:84:e0:f0:2b:0e:1f:54:7c:
16:46:69:4c:4d:61:3c:06:93:6a:72:65:6e:4f:d4:65:2b:b3:
1e:b6:f0:26:0c:30:ab:fd:16:13:44:09:2f:d5:f0:02:69:b8:
91:f0:89:79:a1:ea:11:5a:b3:5f:e7:9c:d3:f1:58:0b:e5:3f:
30:71:5d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:22:18 2025 by rpki-client